c220fef924511a4dd6d8e35d4638d1d9_JaffaCakes118 | Triage

Sharing

General

Target

c220fef924511a4dd6d8e35d4638d1d9_JaffaCakes118
Size

9KB
MD5

c220fef924511a4dd6d8e35d4638d1d9
SHA1

8e5d9c842875c476bb4db1dfc6ae1638d2f4a569
SHA256

10655dbd2fc21cbdf1ffa88d720569f76ab728a05c37f44c94db132d1ef37dc3
SHA512

f1c25786d1b6045543ed0c9b7a265e795176770afeb42698398def487eced23d5353a00c340db67ea973ced9ba6cfe7a02bf49c87ddb2c305b40542e5336021b
SSDEEP

48:SH2dz2LnN576/XmlVOeAqabhJFWN0E2uKpxibSeU7soR7lOdM:S7LnD6vAnohJLi+eU7soRiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c220fef924511a4dd6d8e35d4638d1d9_JaffaCakes118

Files

c220fef924511a4dd6d8e35d4638d1d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66b18ad74eb7db9d498d7ab6c08faba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA

user32

LoadStringA
wsprintfA

shlwapi

StrToIntA

msvcrt

strcat
strlen
malloc
_strlwr
strcpy
strcmp

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ